Network Security Engineer

DMI is seeking a Network Security Engineer to support a network security modernization effort involving Cisco firewall migration and consolidation. The role also includes evaluating an existing Cisco Identity Services Engine (ISE) deployment and performing a wireless health check for the production WLAN environment.

Location and Work Arrangement

Location: Pikesville, Maryland

Work mode: Hybrid, with an on-premise requirement at 1201 Reisterstown Road, Pikesville, MD 21208.

Role Summary

The Network Security Engineer will migrate two (2) pair of Cisco ASA firewalls (high availability) to a Cisco Firepower Threat Defense (FTD) image. The work includes combining Cisco ASA and Firepower features into a single inclusive hardware and software system. The position also requires assessing an existing Cisco ISE deployment and conducting a wireless health check for the production Wireless LAN (WLAN), including optimization and remediation recommendations based on manufacturer recommended best practices.

Key Responsibilities

• Complete the migration from two (2) pair of Cisco (high availability) ASA firewalls to a Cisco Firepower Threat Defense (FTD) image, consolidating ASA and Firepower capabilities into one hardware and software inclusive system.
• Assess an existing Cisco Identity Services Engine (ISE) deployment, including review of ISE server topology.
• Review current configuration, logs, and integration of infrastructure devices.
• Review golden configurations and enhanced authentication details.
• Enable TACACS for up to three (3) admin use cases and create up to three (3) AAA device templates.
• Deliver remediation recommendations based on findings from the assessment phase.
• Conduct knowledge transfer sessions.
• Perform a wireless health check focused on the production WLAN environment, including primary WLC/dashboard assessment. Provide optimization and remediation recommendations as needed based on manufacturer best practices for WLAN design and deployment.
• Participate in a scheduled closure meeting with the client to review assessment findings.

Required Qualifications

• Education: Bachelor’s degree in a related field.
• Experience: Minimum of 12 years of computer-related experience.
• Specialized Security Experience: Minimum of 10 years defining computer security requirements for high-level applications, evaluating approved security product capabilities, and security management.
• Cisco ISE Expertise: Demonstrated expertise with Cisco Identity Services Engine (ISE).
• Citizenship/Work Authorization: US Citizen or valid work permit.

Technologies

• Cisco
• Cisco ASA
• Cisco Firepower Threat Defense (FTD)
• Cisco Identity Services Engine (ISE)
• TACACS
• AAA
• Wireless LAN (WLAN)
• WLC/Dashboard

Compensation

Salary range: USD 96,086 to 120,108 per year.